CVE-2025-21017
BaseFortify
Publication date: 2025-08-06
Last updated on: 2025-08-15
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | blockchain_keystore | to 1.3.17.2 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out-of-bounds write in the detaching crypto box component of the Blockchain Keystore software versions prior to 1.3.17.2. It allows local attackers with privileged access to write data outside the intended memory boundaries, potentially leading to memory corruption.
How can this vulnerability impact me? :
The vulnerability can allow a local privileged attacker to corrupt memory, which may lead to unauthorized data modification, system instability, or potential escalation of privileges. The CVSS score indicates high impact on confidentiality and integrity, and low impact on availability.